Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215731.roa
File: AS215731.roa (raw, json)
Hash identifier: z+x2MpmR3KHYFk35V+s08EUomiqVmiK708dIH4KChSQ=
Subject key identifier: CC:4E:90:55:49:25:3D:AD:40:AC:7A:B4:50:8D:1D:E8:13:39:26:EE
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 4C092B4C7D7A153E9C0DAF01AFA7B74C85D9267A
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215731.roa
Signing time: Fri 23 Aug 2024 08:01:16 +0000
ROA not before: Fri 23 Aug 2024 07:56:16 +0000
ROA not after: Fri 22 Aug 2025 08:01:16 +0000
asID: 215731
IP address blocks: 2a0f:85c1:349::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:09:2b:4c:7d:7a:15:3e:9c:0d:af:01:af:a7:b7:4c:85:d9:26:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: Aug 23 07:56:16 2024 GMT
Not After : Aug 22 08:01:16 2025 GMT
Subject: CN=CC4E905549253DAD40AC7AB4508D1DE8133926EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f8:74:e0:86:f9:7c:f9:d0:09:43:4b:a5:72:
8a:b5:c9:1d:dd:4e:46:22:28:56:89:03:5d:90:f0:
3a:13:96:b2:1e:7f:95:92:b1:16:32:b2:84:b8:ca:
74:82:23:0b:7a:75:17:39:e1:c1:5b:b6:db:49:a2:
00:49:66:26:4c:08:a3:15:d2:a6:f6:50:cc:ce:e0:
20:20:0f:ae:66:75:ff:b9:c4:2e:ee:9a:ea:ea:3c:
9d:fb:26:e1:d5:a7:c2:aa:e6:b1:f9:44:ef:96:21:
ba:81:55:0c:be:2e:3a:e5:ed:86:a3:88:4a:78:c2:
cc:43:42:3b:58:d0:72:47:17:e1:65:0e:7d:56:69:
94:84:94:8f:98:b2:c6:02:05:94:bc:4a:47:bc:69:
45:db:51:63:86:f5:da:ff:6a:68:55:d0:56:8f:5c:
5b:86:c3:c7:9f:41:2b:7c:9c:9b:b8:3c:8d:e8:6f:
8c:f5:0f:5f:b1:7b:01:ef:92:e1:8f:fc:fd:18:c1:
00:30:55:30:e9:b4:d6:8a:80:10:a7:7c:b7:44:25:
b8:0a:8b:10:cf:36:d0:ac:57:65:fc:d0:7d:38:fd:
01:5b:6d:62:cf:84:c3:7b:88:3b:b9:9b:f8:cf:ab:
27:b3:78:8a:2e:94:c4:4d:9f:51:31:37:b5:d3:4a:
e0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4E:90:55:49:25:3D:AD:40:AC:7A:B4:50:8D:1D:E8:13:39:26:EE
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS215731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:85c1:349::/48
Signature Algorithm: sha256WithRSAEncryption
3b:d8:4d:46:d8:12:47:d0:96:b7:52:cc:57:4f:28:51:dd:92:
13:f1:88:3a:40:8f:30:cc:5d:e5:28:2d:4f:05:76:cd:c0:24:
92:38:d0:e2:b7:92:d8:d3:fc:d9:ea:63:f9:27:c4:30:9d:0c:
b6:ff:81:03:83:97:f0:72:83:54:4c:91:68:d3:7e:31:7b:17:
b7:46:c9:6a:6a:ef:46:86:11:0e:4a:5b:dd:fe:0a:36:d8:5d:
03:ec:64:23:76:98:ef:31:be:c9:5a:c7:cb:ad:51:dd:6e:13:
16:4f:e9:e4:13:05:38:5a:fb:a0:57:d8:fb:fa:3e:9c:99:3c:
60:34:5a:ce:bb:82:a8:da:fa:b4:7a:42:7a:66:a2:c0:28:a1:
88:97:19:a2:c9:d6:33:71:83:f0:d9:41:2b:5b:fc:11:f3:88:
d8:67:85:88:7b:43:09:ea:f8:36:83:0d:7d:02:53:1c:f6:ca:
04:e9:52:e1:de:bd:61:d6:14:fc:5e:ab:03:7b:08:4c:02:d2:
cd:45:fb:47:4a:a5:ff:bc:0c:9f:77:dc:57:93:25:3d:fa:88:
c3:09:df:91:dc:91:e4:5a:f1:e9:29:0e:82:18:1d:67:fc:7f:
79:83:10:fa:ee:99:0d:dd:b8:e7:33:27:97:c2:0d:31:0e:cb:
5d:1f:f1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 13:52:02 2024 by rpki-client on console-fra.rpki-client.org